[security-dev] How to map existing JPA entities to picketlink